Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
File:                     CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json)
Hash identifier:          znZuNqZtc1hotH/jpqabjAQaJTEu3eDZ2f8k3JG5u5U=
Subject key identifier:   3F:C6:09:62:16:AC:04:62:85:7B:B0:8F:8A:03:C0:7C:99:4C:E1:91
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Certificate issuer:       /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial:       119A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
Manifest number:          1186
Signing time:             Tue 12 Aug 2025 17:20:58 +0000
Manifest this update:     Tue 12 Aug 2025 17:20:58 +0000
Manifest next update:     Tue 19 Aug 2025 17:20:58 +0000
Files and hashes:         1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: 2J/hUBfxojLqgxrT1rBR1OpQ12iMm+DS6r/sBCP1SM8=)
                          2: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=)
                          3: 03960D4AFF6411EFB94AD726C4F9AE02.roa (hash: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs=)
                          4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
                          rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 17:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4506 (0x119a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F600, serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
        Validity
            Not Before: Aug 12 17:20:58 2025 GMT
            Not After : Aug 19 17:20:58 2025 GMT
        Subject: CN=689b77fa-ba9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4f:66:a4:94:33:e7:f4:83:02:bc:97:8c:59:
                    31:18:59:fc:7b:29:84:42:93:8e:38:35:ae:99:e9:
                    f1:bd:ea:60:8b:58:4f:55:d5:d8:80:69:37:74:47:
                    26:6e:38:65:73:68:67:1a:9b:e4:fc:e6:63:62:3b:
                    43:b9:72:ef:2a:20:88:ed:45:c5:3f:d7:f0:0b:46:
                    d2:22:da:28:5d:c6:03:e2:d9:b0:ca:3e:0d:f4:38:
                    40:a8:d0:53:de:15:6d:b1:99:59:1e:4c:ee:be:ef:
                    f4:df:ee:51:23:a5:6e:03:c0:01:bd:fb:6f:f7:1f:
                    40:e5:64:9e:f6:e1:dd:7f:7a:7d:d8:94:32:40:e8:
                    13:78:e2:75:8a:80:6a:d6:62:b1:c5:57:c4:78:76:
                    4b:6f:4f:b8:00:e5:31:bc:dd:af:67:42:dd:4e:2f:
                    65:03:f8:80:ec:72:32:62:2d:82:52:b0:1c:03:8a:
                    06:1a:c8:08:f2:cb:dd:c4:48:d6:8a:89:f6:25:7a:
                    45:05:d8:22:f1:43:97:df:f8:93:eb:25:f2:15:14:
                    b6:c2:3a:8e:ff:42:13:6b:45:65:91:3f:10:7c:19:
                    fb:7e:50:49:72:5b:cb:53:a2:3e:11:77:e3:ca:d6:
                    62:e0:a5:ff:9d:ca:f9:e1:f0:23:38:4f:19:2e:ef:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C6:09:62:16:AC:04:62:85:7B:B0:8F:8A:03:C0:7C:99:4C:E1:91
            X509v3 Authority Key Identifier:
                keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:5f:42:08:d9:5a:92:77:f2:09:8c:e4:21:ad:6a:4f:05:74:
         95:8c:ce:3d:79:0e:8e:96:eb:35:aa:09:f1:ea:a4:cc:07:5f:
         ff:82:12:60:f8:97:98:88:42:22:88:27:b5:cf:07:e1:10:ef:
         c6:e0:07:74:2f:2e:7f:59:ba:b4:aa:ea:c2:d3:f6:d0:fe:67:
         6c:f9:1e:d7:d9:33:71:02:32:1a:68:50:39:09:61:d7:34:15:
         30:24:aa:d0:88:97:87:79:3c:f3:28:45:2e:66:55:9d:60:fb:
         34:f0:bf:a3:a0:29:f4:33:19:2c:4b:a3:33:e8:e5:a5:3b:88:
         4c:0c:4f:70:77:6f:7f:4a:94:c2:7a:56:50:30:df:c7:f0:d3:
         1e:4b:38:63:d9:b5:02:7c:a3:60:da:e9:ab:1f:22:cc:12:d0:
         80:a2:8a:6d:82:30:43:72:3c:c5:bc:29:ba:cf:14:f9:6f:a6:
         00:9a:5b:57:35:28:55:6e:c2:05:94:de:01:11:e3:4d:01:64:
         aa:0d:42:58:ec:1e:95:18:4c:cd:71:f0:e4:85:9c:ce:f3:86:
         1e:48:70:23:06:23:64:22:99:86:8f:c0:27:02:fb:e1:58:58:
         3a:3b:9f:55:bb:ac:fe:88:e1:7c:56:e8:0f:24:dc:34:c4:ec:
         28:70:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:11 2025 by rpki-client